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Abstract 


Networks use tunnels for a variety of reasons. A large variety of tunnel types are defined, and the 
tunnel encapsulator router needs to select a type of tunnel that is supported by the tunnel 
decapsulator router. This document defines how to advertise, in OSPF Router Information Link 
State Advertisements (LSAs), the list of tunnel encapsulations supported by the tunnel 
decapsulator. 
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1. Introduction 


Networks use tunnels for a variety of reasons, such as: 


e Partial deployment of IPv6 in IPv4 networks or IPv4 in IPv6 networks, as described in 
[RFC5565], where IPvx tunnels are used between IPvx-enabled routers so as to traverse non- 
IPvx routers. 

e Remote Loop-Free Alternate (RLFA) repair tunnels as described in [RFC7490], where tunnels 
are used between the Point of Local Repair and the selected PQ node. 


The tunnel encapsulator router needs to select a type of tunnel that is supported by the tunnel 
decapsulator router. This document defines how to advertise, in OSPF Router Information Link 
State Advertisements (LSAs), the list of tunnel encapsulations supported by the tunnel 
decapsulator. In this document, OSPF refers to both OSPFv2 [RFC2328] and OSPFv3 [RFC5340]. 


2. Terminology 
This memo makes use of the terms defined in [RFC7770]. 


The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD 
NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to 
be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in 
all capitals, as shown here. 


3. Tunnel Encapsulations TLV 


Routers advertise their supported tunnel encapsulation type(s) by advertising a new TLV of the 
OSPF Router Information (RI) Opaque LSA [RFC7770], referred to as the "Tunnel Encapsulations 
TLV". This TLV is applicable to both OSPFv2 and OSPFv3. 


The Type code of the Tunnel Encapsulations TLV is 13, the Length value is variable, and the Value 
field contains one or more Tunnel Sub-TLVs, as defined in Section 4. Each Tunnel Sub-TLV 
indicates a particular encapsulation format that the advertising router supports, along with the 
parameters corresponding to the tunnel type. 


The Tunnel Encapsulations TLV MAY appear more than once within a given OSPF Router 
Information (RI) Opaque LSA. If the Tunnel Encapsulations TLV appears more than once in an 
OSPF Router Information LSA, the set of all Tunnel Sub-TLVs from all Tunnel Encapsulations 
TLVs SHOULD be considered. The scope of the advertisement depends on the application, but it is 
recommended that it SHOULD be domain wide. 


4. Tunnel Sub-TLV 


The Tunnel Sub-TLV is structured as shown in Figure 1. 
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2) 1 2 3 

o mPp TAR rer 9 001235495 789r TAS 7 9G 

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
Tunnel Type (2 octets) l Length (2 octets) l 

-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


| 
+ 
| 
| Tunnel Parameter Sub-TLVs | 
| 
+ 


-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


Figure 1: Tunnel Sub-TLV 


Tunnel Type (2 octets): Identifies the type of tunneling technology signaled. Tunnel types are 
shared with the BGP extension [RFC9012] and hence are defined in the IANA registry "BGP 
Tunnel Encapsulation Attribute Tunnel Types". Unknown tunnel types are to be ignored upon 
receipt. 


Length (2 octets): Unsigned 16-bit integer indicating the total number of octets of the Tunnel 
Parameter Sub-TLVs field. 


Tunnel Parameter Sub-TLVs (variable): Zero or more Tunnel Parameter Sub-TLVs, as defined in 
Section 5. 


If a Tunnel Sub-TLV is invalid, it MUST be ignored and skipped. However, other Tunnel Sub-TLVs 
MUST be considered. 


5. Tunnel Parameter Sub-TLVs 


A Tunnel Parameter Sub-TLV is structured as shown in Figure 2. 


poon noe + 
l Tunnel Parameter Sub-Type (2 octets) l 
+--------------------------------------------- + 
l Tunnel Parameter Length (2 octets) l 
+--------------------------------------------- + 


Figure 2: Tunnel Parameter Sub-TLV 


Tunnel Parameter Sub-Type (2 octets): Each sub-type defines a parameter of the Tunnel Sub- 
TLV. Sub-types are registered in the IANA registry "OSPF Tunnel Parameter Sub-TLVs" (see 
Section 7.2). 


Tunnel Parameter Length (2 octets): Unsigned 16-bit integer indicating the total number of 
octets of the Tunnel Parameter Value field. 
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Tunnel Parameter Value (variable): Encodings of the Value field depend on the sub-TLV type. 
The following subsections define the encoding in detail. 


Any unknown Tunnel Parameter sub-type MUST be ignored and skipped upon receipt. When a 
reserved value (see Section 7.2) is seen in an LSA, it MUST be treated as an invalid Tunnel 
Parameter Sub-TLV. When a Tunnel Parameter Value has an incorrect syntax or semantics, it 
MUST be treated as an invalid Tunnel Parameter Sub-TLV. If a Tunnel Parameter Sub-TLV is 
invalid, its Tunnel Sub-TLV MUST be ignored. However, other Tunnel Sub-TLVs MUST be 
considered. 


5.1. Encapsulation Sub-TLV 


This sub-TLV type is 1. The syntax, semantics, and usage of its Value field are defined in Section 
3.2 ("Encapsulation Sub-TLVs for Particular Tunnel Types") of [RFC9012]. 


5.2. Protocol Type Sub-TLV 


This sub-TLV type is 2. The syntax, semantics, and usage of its Value field are defined in Section 
3.4.1 ("Protocol Type Sub-TLV") of [RFC9012]. 


5.3. Tunnel Egress Endpoint Sub-TLV 


The Tunnel Egress Endpoint Sub-TLV specifies the address of the egress endpoint of the tunnel -- 
that is, the address of the router that will decapsulate the payload. 


This sub-TLV type is 3. It MUST be present once and only once in a given Tunnel Sub-TLV. The 
Value field contains two subfields: 


e a two-octet Address Family subfield 
e an Address subfield, whose length depends upon the Address Family 


2) 1 2 3 

2) ) Pst ZY ye 7 cP le a) eas Gy 7s ) GG) es eS) 7 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
| Address Family | Address ~ 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + 
~ (variable length) ~ 
| 


+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
Figure 3: Tunnel Egress Endpoint Sub-TLV 


The Address Family subfield contains a value from IANA's "Address Family Numbers" registry. In 
this document, we assume that the Address Family is either IPv4 or IPv6; use of other address 
families is outside the scope of this document. 
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If the Address Family subfield contains the value for IPv4, the Address subfield MUST contain an 
IPv4 address (a /32 IPv4 prefix). In this case, the Length field of the Tunnel Egress Endpoint Sub- 
TLV MUST contain the value 6. 


If the Address Family subfield contains the value for IPv6, the address subfield MUST contain an 
IPv6 address (a /128 IPv6 prefix). In this case, the Length field of the Tunnel Egress Endpoint Sub- 
TLV MUST contain the value 18 (0x12). IPv6 link-local addresses are not valid values of the IP 
address field. 


5.4. Color Sub-TLV 


This sub-TLV type is 4. It may appear zero or more times in a given Tunnel Sub-TLV. The Value 
field is a 4-octet opaque unsigned integer. 


The color value is user-defined and configured locally on the advertising routers. It may be used 
by service providers to define policies on the tunnel encapsulator routers, for example, to control 
the selection of the tunnel to use. 


This color value can be referenced by BGP routes carrying the Color Extended Community 
[RFC9012]. If the tunnel is used to reach the BGP next hop of BGP routes, then attaching a Color 
Extended Community to those routes expresses the willingness of the BGP speaker to use a 
tunnel of the same color. 


5.5. Load-Balancing Block Sub-TLV 


This sub-TLV type is 5. The syntax, semantics, and usage of its Value field are defined in 
[RFC5640]. 


5.6. DS Field Sub-TLV 


This sub-TLV type is 6. The syntax, semantics, and usage of its Value field are defined in Section 
3.3.1 ("DS Field") of [RFC9012]. 


5.7. UDP Destination Port Sub-TLV 


This sub-TLV type is 7. The syntax, semantics, and usage of its Value field are defined in Section 
3.3.2 ("UDP Destination Port") of [RFC9012]. 


6. Operation 


The advertisement of a Tunnel Encapsulations Sub-TLV indicates that the advertising router 
supports a particular tunnel decapsulation along with the parameters to be used for the tunnel. 
The decision to use that tunnel is driven by the capability of the tunnel encapsulator router to 
support the encapsulation type and the policy on the tunnel encapsulator router. The Color Sub- 
TLV (see Section 5.4) may be used as an input to this policy. Note that some tunnel types may 
require the execution of an explicit tunnel setup protocol before they can be used to transit data. 
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A tunnel MUST NOT be used if there is no route toward the IP address specified in the Tunnel 
Egress Endpoint Sub-TLV (see Section 5.3) or if the route is not advertised in the same OSPF 
domain. 


7. IANA Considerations 


7.1. OSPF Router Information (RI) TLVs Registry 


IANA has allocated the following new code point in the "OSPF Router Information (RI) TLVs" 
registry. 


Value TLV Name Reference 

13 Tunnel Encapsulations RFC 9013 
Table 1: Addition to OSPF Router Information (RI) 
TLVs Registry 


7.2. OSPF Tunnel Parameter Sub-TLVs Registry 


IANA has created a new subregistry called the "OSPF Tunnel Parameter Sub-TLVs" registry under 
the "Open Shortest Path First (OSPF) Parameters" registry. The registration procedures are as 
follows: 


e The values in the range 1-34999 are to be allocated using the "Standards Action" registration 
procedure defined in [RFC8126]. 


e The values in the range 35000-65499 are to be allocated using the "First Come First Served" 
registration procedure. 


The initial contents of the registry are as follows: 


Value TLV Name Reference 

0 Reserved RFC 9013 

1 Encapsulation RFC 9013 & RFC 9012 
2 Protocol Type RFC 9013 & RFC 9012 
3 Endpoint RFC 9013 

4 Color RFC 9013 

5 Load-Balancing Block RFC 9013 & RFC 5640 
6 DS Field RFC 9013 & RFC 9012 
7 UDP Destination Port RFC 9013 & RFC 9012 
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Value TLV Name Reference 
8-65499 Unassigned 
65500-65534 Experimental RFC 9013 
65535 Reserved RFC 9013 
Table 2: Initial Contents of OSPF Tunnel Parameter Sub-TLVs 
Registry 


8. Security Considerations 


Security considerations applicable to softwires can be found in the mesh framework [RFC5565]. 
In general, security issues of the tunnel protocols signaled through this OSPF capability extension 
are inherited. 


If a third party is able to modify any of the information that is used to form encapsulation 
headers, choose a tunnel type, or choose a particular tunnel for a particular payload type, user 
data packets may end up getting misrouted, misdelivered, and/or dropped. However, since an 
OSPF routing domain is usually a well-controlled network under a single administrative domain, 
the possibility of the above attack is very low. 


We note that the last paragraph of Section 6 forbids the establishment of a tunnel toward 
arbitrary destinations. It prohibits a destination outside of the OSPF domain. This prevents a 
third party that has gained access to an OSPF router from being able to send the traffic to other 
destinations, e.g., for inspection purposes. 


Security considerations for the base OSPF protocol are covered in [RFC2328] and [RFC5340]. 
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